bp-cloudflared

---
name: "bp-cloudflared"
description: "Serve the workspace root on 127.0.0.1:11223. Tunnel it with cloudflared (--metrics 127.0.0.1:11224). Run on the machine that can bind localhost."
license: "MIT"
---

# bp-cloudflared

Serve the workspace root on `127.0.0.1:11223`. Tunnel it with cloudflared
(`--metrics 127.0.0.1:11224`). Run on the machine that can bind localhost.

## Preflight

```bash
curl -sf -o /dev/null -w "%{http_code}" http://127.0.0.1:11223/ || echo DOWN
curl -sf http://127.0.0.1:11224/metrics | head -5 || echo DOWN
```

Reuse whatever is up. If a port is taken but is not this stack, free it. Do not start a second listener.

## Start (missing pieces only)

Install once: `brew install cloudflared`

```bash
python3 -m http.server 11223 --bind 127.0.0.1
cloudflared tunnel --url http://127.0.0.1:11223 --metrics 127.0.0.1:11224 --no-autoupdate
```

No login. If `~/.cloudflared/config.yml` breaks Quick Tunnel, rename it.

## URL

```bash
curl -sf http://127.0.0.1:11224/metrics \
  | grep -oE 'userHostname="https://[a-zA-Z0-9.-]+\.trycloudflare\.com"' \
  | head -1 \
  | sed -E 's/userHostname="(.*)"/\1/'
```

If empty, retry briefly, then read the log line `Your quick Tunnel has been created!`.

Write `.cloudflared.json`:

```json
{ "public_base_url": "https://RANDOM.trycloudflare.com", "updated_at": "2026-08-14T12:00:00Z" }
```

Trust that file only while metrics still respond. Share `{public_base_url}/{path}`. Local: `http://127.0.0.1:11223/{path}`.

## Stop

Ctrl+C or kill 11223/11224. Public links die.